> trusthunt/not checked yet · trusthunt.co.uk/tools/vanta
Trust card: Vanta
Automates the evidence for SOC 2, ISO 27001 and other audits by connecting to your systems.
| data to vendor | Its trust centre lists customer and employee personal information, card and health information among the data it may hold. | ○ public info |
|---|---|---|
| data location | Core data on AWS and MongoDB in the US, EU or Australia; Cloudflare in the US and EU. | ○ public info |
| sub-processors | Includes AWS (hosting; US, EU or Australia), MongoDB (database; US, EU or Australia), Cloudflare (hosting and delivery; US, EU), Chameleon (in-app notifications; US). Full list on its trust centre. | ○ public info |
| certifications | SOC 2 Type II, ISO 27001:2022, ISO 27701, ISO 27017, ISO 27018, ISO/IEC 42001, PCI DSS 4.0.1, FedRAMP 20x | ○ public info |
“✓ checked” means TrustHunt saw evidence; “~ maker says” is the maker’s own statement. The live card may be newer than this copy.